This has me pretty well flummoxed. Maybe someone more familiar with the op translation stuff has a clue. What I'm seeing is this -- every once in a while, this site will barf up an ISE, leaving the following error message in the logs: [Tue Nov 18 05:06:00 2003] [error] Unmatched ) in regex; marked by <-- HERE in m/^') <-- HERE ;$/ at /usr/home/scoop/scoop/lib/Scoop/ApacheHandler.pm line 403. So it's got an op in the internal ops list that apparently is "');". Another clue is that when I look at the ops admin tool, sometimes it will include spurious ops that don't exist in the database, like "MT", and common exploit urls like "__vti_bin". Basically, just random crap that comes in and should be ignored. But instead, it looks like sometimes they're being parsed out and added to the cached ops list for that httpd child. My guess is that somewhere out there is a screwed up link, which looks like "site.com/');" or something like that, and it's being added to the ops list and causing this problem. So, basically, what the hell? How is random input getting into my ops list? --R -- Rusty Foster : rusty at kuro5hin.org : http://www.kuro5hin.org Please go away often: http://www.hotelchatter.com/ Most sites love getting linked by Slashdot --Grant Gross